Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
File:                     Alr-kZVIIEnyUJPriYEVxr03FEg.mft (raw, json)
Hash identifier:          WrCSacaHsmqzJH5Dpnj0QBKJNI6cPj6sbiFsWwMvmWM=
Subject key identifier:   79:D2:FE:EA:12:EE:A8:04:C5:4D:8F:00:79:EE:8D:40:FB:68:10:74
Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
Certificate issuer:       /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448
Certificate serial:       038F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
Manifest number:          0387
Signing time:             Sat 03 Oct 2026 01:48:45 +0000
Manifest this update:     Sat 03 Oct 2026 01:48:44 +0000
Manifest next update:     Sat 10 Oct 2026 01:48:44 +0000
Files and hashes:         1: Alr-kZVIIEnyUJPriYEVxr03FEg.crl (hash: q8ab+1w5wNTfamkuWkt8Cqd5Sl7ZdAkfqBPOJMKNVcs=)
                          2: 5CE70ACC074E11ED99CF6642C4F9AE02.roa (hash: z9m+uvmmZmgBXsz1OFhoOX9NKLKtBpx/ZqKVtid9t1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
                          rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 01:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911 (0x38f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA044, serialNumber=025AFE9195482049F25093EB898115C6BD371448
        Validity
            Not Before: Oct  3 01:48:44 2026 GMT
            Not After : Oct 10 01:48:44 2026 GMT
        Subject: CN=6ac05efc-6096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:79:d5:be:f1:01:f4:39:67:90:4e:2b:b0:
                    23:02:dc:fe:8b:54:68:de:c3:fb:91:3f:0a:40:1e:
                    86:3b:3c:a3:6d:66:a0:23:a4:c7:35:72:fb:76:7a:
                    32:b1:cb:65:60:e7:f7:b2:49:3a:e1:cc:e1:8e:ed:
                    00:dc:26:e2:9d:97:05:6e:bd:09:91:a4:5a:fa:9a:
                    53:c5:78:1e:4f:de:95:1e:36:88:87:0f:f7:55:67:
                    ec:99:9e:18:a2:bb:d5:bf:e0:81:f9:6c:2b:dc:ac:
                    45:ff:74:64:f3:10:d4:48:01:8c:58:52:00:35:df:
                    77:70:86:88:0a:68:d6:ab:25:a6:48:8f:49:c4:ec:
                    49:32:ba:25:84:1b:41:86:e0:8d:a3:77:f0:a4:0e:
                    c6:7b:89:8d:a5:c8:60:03:f2:5c:cd:23:98:e6:c0:
                    be:4b:c9:a3:8f:bf:ee:cf:1c:78:85:5a:b7:a6:d8:
                    17:47:8d:b4:32:b7:a1:c0:19:92:a1:13:1a:01:52:
                    5d:a9:24:bb:45:72:39:da:c9:7b:35:97:b2:1d:74:
                    37:5f:92:c5:96:5a:77:46:cb:bb:26:e2:ac:e3:20:
                    ee:5d:72:be:f1:c7:8c:21:09:59:b5:6e:c0:8a:d9:
                    92:83:15:2f:0b:50:ef:e5:0a:80:d5:98:1d:e9:28:
                    2a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D2:FE:EA:12:EE:A8:04:C5:4D:8F:00:79:EE:8D:40:FB:68:10:74
            X509v3 Authority Key Identifier:
                keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:84:80:ab:7e:f0:4a:8f:d4:81:08:3c:a0:9a:f0:0f:86:c4:
         1e:5e:69:88:85:4f:cb:e1:a0:cf:91:2c:c1:63:7c:a6:4a:28:
         52:47:5a:49:3f:d7:c2:df:03:24:61:9c:b0:01:51:6c:b4:06:
         3a:eb:56:ee:2c:0c:96:9a:88:e1:c4:58:d9:22:e4:98:3c:5d:
         79:cb:ec:f2:47:dc:0d:ce:c6:fd:54:01:e6:80:38:4f:0a:e0:
         2e:f5:2f:b2:1f:51:55:9f:fb:6b:ad:f0:9f:22:36:67:1e:54:
         ae:23:ec:af:78:45:6d:2d:09:58:0c:66:00:ad:89:57:fa:39:
         f4:51:10:27:48:93:63:8c:75:1c:28:85:01:4e:3a:5c:e1:b7:
         f8:4c:48:99:bc:31:86:c9:32:47:6c:13:cc:69:86:71:12:d7:
         02:19:36:fe:8e:f1:bb:77:1f:6e:c7:52:da:62:5f:c7:fd:c1:
         93:32:15:03:20:0f:3f:36:02:be:50:f6:26:ed:3c:2b:f2:07:
         cf:dd:a5:15:55:bc:db:19:29:91:97:c1:e7:08:fc:7d:8d:27:
         4c:e7:80:7a:0d:64:58:5d:d9:e8:82:b8:8e:8a:80:f5:f4:48:
         ab:06:23:27:57:51:83:e0:90:b6:a8:6e:14:68:71:b6:90:65:
         78:d7:0e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:00:41 2026 by rpki-client